nanog mailing list archives

Re: huawei


From: Leo Bicknell <bicknell () ufp org>
Date: Thu, 13 Jun 2013 12:42:38 -0500


On Jun 13, 2013, at 11:35 AM, Patrick W. Gilmore <patrick () ianai net> wrote:

Also, I find it difficult to believe Hauwei has the ability to do DPI or something inside their box and still route 
at reasonable speeds is a bit silly. Perhaps they only duplicate packets based on source/dest IP address or something 
that is magically messaged from the mother ship, but I am dubious.

This could be a latent, not used feature from _any_ vendor.

A hard coded backdoor password and username.  A sequence of port-knocking that enables ssh on an alternate port with no 
ACL.  Logins through that mechanism not in syslog, not in the currently logged in user table, perhaps the process(es) 
hidden from view.

Do we really trust Cisco and Juniper more than Hueawei? :)

-- 
       Leo Bicknell - bicknell () ufp org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/







Current thread: